Re: [TLS] Last Call: draft-ietf-tls-rfc4346-bis (The Transport

[pgut001 at cs.auckland.ac.nz (Peter Gutmann)]

Eric Rescorla <ekr at networkresonance.com> writes:

>It's not *bad*. It's just unnecessary.

I think that only holds true outside the security context.  In this case
however "unnecessary" is synonymous with "bad", because the more unnecessary
features you have to add, the greater the chance of getting something wrong
somewhere in a way that'll come back to bite you later.  Even just the extra
overhead of testing for correctness and interoperability (without the worry of
opening up security holes) is sufficient to make this "bad".

Peter.
_______________________________________________
TLS mailing list
TLS at ietf.org
https://www.ietf.org/mailman/listinfo/tls